Remove or transform user names before authentication?

Dylan Martin Dylan.Martin at seattlecolleges.edu
Fri Dec 2 12:15:18 EST 2016


I just had a very similar problem and fixed it via
password-authn-config.xml.  I'm really new to this, so in case you're like
me, the trick was to look for the example that's commented out in that
file.

Now I'm working on applying different regex's for different SPs.  The
solution involves defining custom attributes, which could also apply to
your situation.  The docs for attribute magic are here:

https://wiki.shibboleth.net/confluence/display/IDP30/AttributeResolverConfiguration

Then you just set up the IDP to provide the appropriate attribute in the
appropriate circumstances.  EG filteredUsername.

-Dylan

On Fri, Dec 2, 2016 at 6:23 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 12/2/16, 12:42 AM, "users on behalf of Brian Mathis" <
> users-bounces at shibboleth.net on behalf of brian.mathis at gmail.com> wrote:
>
> > Is there a feature that does this?  I've done some searching buy
> > haven't found the right keywords yet.  Any examples that would help?
>
> Only via regex, transforms bean is in password-authn-config.xml.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161202/9a2b5fdc/attachment.html>


More information about the users mailing list